Privacy notice
This notice describes how personal data is processed in connection with the loblolly.eu online store, in line with the GDPR (EU 2016/679).
1. Data controller
Nautilus System Kft. (Loblolly) 1115 Budapest, Bartók Béla út 105-113., bldg. 4, 2nd floor, Hungary Company reg. no.: 01 09 919468 · VAT: 14779011-2-43 Email: we.are@loblolly.eu · Phone: +36 70 367 6707
2. What we process and why
- Order fulfilment: name, email, phone, shipping and billing address, ordered items. Legal basis: performance of a contract (Art. 6(1)(b)).
- Invoicing and accounting: billing data. Legal basis: legal obligation (Art. 6(1)(c)), retained for 8 years.
- Contact requests: email address and message content. Legal basis: legitimate interest / consent.
- Newsletter (if you subscribe): name and email. Legal basis: consent, withdrawable at any time.
- Statistics cookies: anonymised visit data. Legal basis: consent.
3. Processors
- Shopify International Ltd. (Ireland) — store, cart, payment and order management.
- Lovable (website hosting).
- The selected courier partner — data needed for delivery.
- Our accounting partner — invoicing data.
4. Cookies
Strictly necessary cookies (cart, language choice, security) work without consent. Statistics or marketing cookies are only set after your consent; you can change your decision at any time by clearing the site storage in your browser.
5. Your rights
- Information and access to the data we hold.
- Rectification, erasure, restriction of processing.
- Data portability, objection, withdrawal of consent.
Send your request to we.are@loblolly.eu; we reply within 30 days at the latest. You may also lodge a complaint with the Hungarian data protection authority (NAIH, 1055 Budapest, Falk Miksa utca 9-11., ugyfelszolgalat@naih.hu) or go to court.
6. Security
The store runs over an encrypted (HTTPS) connection. Payment details are handled exclusively by Shopify's payment system; we have no access to them.